cancel
Showing results for 
Search instead for 
Did you mean: 

cisco 2950 as radius client to UAC posing problem

badar28_
Occasional Contributor

cisco 2950 as radius client to UAC posing problem

Dear All,

i want to communicate cisco2950 switch with UAC and want to implement 802.1x auth, but i got this under mentioned error,

what should i correct on both the uac and cisco 2950 switch.

Switch#
00:12:36: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to down
00:12:37: RADIUS: ustruct sharecount=1
00:12:37: RADIUS: EAP-login: length of radius packet = 133 code = 1
00:12:37: RADIUS: Initial Transmit FastEthernet0/3 id 8 10.1.1.1:1812, Access-Request, len 133
00:12:37: Attribute 4 6 00000000
00:12:37: Attribute 5 6 0000C353
00:12:37: Attribute 61 6 0000000F
00:12:37: Attribute 1 11 616E6F6E
00:12:37: Attribute 30 19 30302D30
00:12:37: Attribute 31 19 30302D32
00:12:37: Attribute 6 6 00000002
00:12:37: Attribute 12 6 000005DC
00:12:37: Attribute 79 16 0200000E
00:12:37: Attribute 80 18 4C623BD0
00:12:37: %LINK-3-UPDOWN: Interface FastEthernet0/5, changed state to down
00:12:39: %LINK-3-UPDOWN: Interface FastEthernet0/3, changed state to up
00:12:42: RADIUS: Retransmit id 8
00:12:47: RADIUS: Retransmit id 8
00:12:52: RADIUS: Retransmit id 8
00:12:57: RADIUS: Marking server 10.1.1.1:1812,1813 dead
00:12:57: RADIUS: Tried all servers.
00:12:57: RADIUS: No valid server found. Trying any viable server
00:12:57: RADIUS: Tried all servers.
00:12:57: RADIUS: No response for id 8

waiting

commands on cisco:

aaa new-model
aaa group server radius RADIUS_AUTH
server 10.1.1.1 auth-port 1812 acct-port 1813

aaa authentication login networkaccess group RADIUS_AUTH enable
aaa authorization exec default group RADIUS_AUTH if-authenticated
ip radius source-interface FastEthernet 0/23
radius-server host 10.1.1.1 auth-port 1812 acct-port 1813 key pakistan

radius-server retransmit 3

Regards

Badar

2 REPLIES 2
lto_
Occasional Contributor

Re: cisco 2950 as radius client to UAC posing problem

Hi,

are you sure about your ports? Try 1645 and 1646, I believe Juniper default to these ports.

IPsec_
Occasional Contributor

Re: cisco 2950 as radius client to UAC posing problem

Check IC side event logs. I hope you have added Cisco 2950 as radius client. Check ping reachablity between Infranet Controller and cisco switch.